PT-2012-1144 · Puppet+1 · Puppet+2

Published 2012-06-27 · Updated 2019-07-11 · CVE-2012-1989

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Puppet versions prior to 2.7.13 Puppet Enterprise (PE) versions 1.2.x, 2.0.x, and 2.5.x prior to 2.5.1

Description The issue affects the confidentiality, integrity, and availability of protected information. It can be exploited remotely by an authenticated attacker. The vulnerability in telnet.rb allows local users to overwrite arbitrary files via a symlink attack on the NET::Telnet connection log (/tmp/out.log).

Recommendations For Puppet versions prior to 2.7.13, update to version 2.7.13 or later. For Puppet Enterprise (PE) versions 1.2.x, 2.0.x, and 2.5.x prior to 2.5.1, update to version 2.5.1 or later. As a temporary workaround, consider restricting access to the telnet.rb module to minimize the risk of exploitation. Avoid using the telnet.rb module in sensitive environments until the issue is resolved.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

BDU:2015-09668

CVE-2012-1989

GHSA-C5QQ-G673-5P49

Affected Products

Puppet

Puppet Enterprise

Suse

References · 22

• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/puppet/CVE-2012-1989.yml · Exploit
• https://hermes.opensuse.org/messages/15087408 · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2012-05/msg00012.html · Vendor Advisory
• http://puppetlabs.com/security/cve/cve-2012-1989 · Vendor Advisory
• http://ubuntu.com/usn/usn-1419-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09668 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2012-1989 · Security Note
• http://secunia.com/advisories/48748 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-1989 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2012-1989 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2012-1989 · Vendor Advisory
• http://secunia.com/advisories/49136 · Vendor Advisory
• http://secunia.com/advisories/48743 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-c5qq-g673-5p49 · Vendor Advisory
• https://github.com/puppetlabs/puppet · Note